Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/PVXPJwIQIpDn-ZeHxZrahQRsjvE.roa
File: PVXPJwIQIpDn-ZeHxZrahQRsjvE.roa (raw, json)
Hash identifier: roL4k3hXUvVXL/1RRC2s/nKcbIAT2UJTv86hEyR3cbM=
Subject key identifier: 3D:55:CF:27:02:10:22:90:E7:F9:97:87:C5:9A:DA:85:04:6C:8E:F1
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246E6BC04A1EE67AA7210B5223DCC0E
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/PVXPJwIQIpDn-ZeHxZrahQRsjvE.roa
Signing time: Mon 02 Jan 2023 11:38:47 +0000
ROA not before: Mon 02 Jan 2023 11:38:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197769
IP address blocks: 85.187.255.0/24 maxlen: 24
85.187.254.0/24 maxlen: 24
85.187.253.0/24 maxlen: 24
85.187.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Sep 2023 18:58:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e6:bc:04:a1:ee:67:aa:72:10:b5:22:3d:cc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d55cf2702102290e7f99787c59ada85046c8ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:d8:ee:24:32:e7:a0:ba:1d:53:15:88:5b:
99:02:70:24:33:60:f2:8f:ee:c5:1f:ea:50:b4:4b:
5d:28:01:31:d0:11:6e:d3:01:15:39:e2:8f:06:49:
62:68:e1:34:46:d3:5d:34:35:3f:d9:e2:06:17:71:
56:4e:27:2d:ae:de:60:8e:5e:4d:d1:30:f4:ba:4f:
3f:e3:cd:72:a4:a2:41:f9:c0:d1:1a:90:50:2d:1b:
f6:84:1a:22:71:1c:01:10:1e:d6:be:5b:b4:52:8b:
74:10:03:0f:90:2d:ac:fc:44:94:f4:d4:a6:93:3d:
88:84:a3:a7:2c:32:28:92:65:81:9b:b7:dc:79:96:
da:d6:ff:cb:bb:28:f6:d5:c1:00:89:2c:d8:5c:87:
0a:b5:98:1b:8e:62:a3:83:26:6b:5a:d3:49:2d:9d:
da:45:a1:85:72:7b:c3:28:fe:27:d5:55:a6:55:8f:
bb:6c:6c:98:3b:9c:59:4f:08:34:98:45:3f:95:b8:
ac:60:e8:dc:d2:99:b4:a2:eb:02:b7:04:ca:8b:fc:
43:6a:3a:ff:85:12:74:31:b4:62:26:6a:29:7e:65:
63:37:ac:e3:ea:aa:bd:70:40:45:e0:02:9e:11:5b:
99:c0:4a:69:eb:88:1c:bd:50:9d:a6:22:ed:60:0b:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:55:CF:27:02:10:22:90:E7:F9:97:87:C5:9A:DA:85:04:6C:8E:F1
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/PVXPJwIQIpDn-ZeHxZrahQRsjvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.252.0/22
Signature Algorithm: sha256WithRSAEncryption
32:38:de:a4:02:34:a1:96:8f:5e:f9:d4:11:46:e5:a5:9c:51:
e1:1f:c2:2f:6f:32:f2:d9:dc:4b:31:9f:2f:b6:b6:37:dd:9b:
9c:ce:09:c5:f9:48:24:38:02:af:52:a4:53:4c:ae:9c:e7:53:
48:07:93:56:26:3d:cc:59:bf:d7:4c:76:26:45:30:1a:b2:4e:
16:be:b0:30:50:8b:ea:21:10:90:84:4f:55:48:f9:a5:17:92:
00:8a:2e:ac:bb:41:b6:5d:61:24:ee:a1:61:90:e9:d8:ba:5c:
7f:dc:79:c6:6c:4d:b2:f0:aa:bd:98:13:74:6e:47:07:15:ee:
fe:8a:ae:29:20:b0:30:09:9f:64:44:fb:2a:3a:b8:3d:fc:a6:
86:53:67:33:3f:25:65:fa:b4:80:fb:95:00:50:e4:61:47:f1:
ab:b6:7c:22:19:42:81:b0:da:9b:9b:63:10:d6:26:6a:b1:c7:
99:69:7f:a3:ec:36:2f:5d:fb:01:34:a1:b2:0d:86:de:28:b5:
4f:de:15:0e:82:a0:59:a4:72:2d:b9:63:6b:da:0e:3d:d1:41:
ab:e3:95:86:cc:78:93:38:99:91:a1:ba:f7:96:4e:99:31:f9:
0d:b0:69:d5:31:a1:8f:62:0f:ae:c7:da:0d:2a:4c:6e:51:11:
c0:23:30:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org